U.S. Federal Laws, Regulations + Government Institutions

Children’s Privacy

Children’s Online Privacy Protection Act

15 U.S.C. §6501 et seq.

Children's Online Privacy Protection Rule

16 C.F.R. pt. 312

Electronic Communications

Communications Assistance for Law Enforcement Act

47 USC §§ 1001 - 1021

CALEA Regulations

47 C.F.R. §§ 1.20000 to 1.20008

Telecommunications Act of 1996: Customer Proprietary Network Information (CPNI) provisions

See 47 § USC 222

Telephone Consumer Protection Act of 1991

See 47 USC § 227

Electronic Communications Privacy Act
Title I
Title II
Title III
CAN-SPAM Act of 2003

Codified at 15 U.S.C. §§ 7701 – 7713

CAN-SPAM Act FTC Regulations
16 C.F.R. §§ 316.1 to 316.6
CAN-SPAM Act FCC Regulations
47 C.F.R. § 64.3100

Financial Privacy

Customer Identification Programs for Banks, Savings Associations, Credit Unions and Certain Non-Federally Regulated Banks
Interagency Guidance on Authentication in an Internet Banking Environment
FFIEC 2005 Guidance
FFIEC 2011 Supplement
FAQs
Federal Reserve Board Regulations
Fair Credit Reporting Act
Fair and Accurate Credit Transactions Act
Affiliate Marketing Rule - CFPB
Model Affiliate Marketing Notices - CFPB
Furnisher Rules - CFPB
Furnisher Guidelines - CFPB
Model Negative Information Notice - CFPB
Prescreen Notice Rule - CFPB
Model Prescreen Notices - CFPB
Risk-Based Pricing Rule - CFPB
Model Risk-Based Pricing Notices - CFPB
California SB1 Preemption Decision (ABA v. Lockyer)
Gramm-Leach-Bliley Act (GLBA)
Regulation P - CFPB
Privacy - FTC
Regulation S-P - SEC
Privacy - CFTC
Interagency Guidelines Establishing Standards for Safeguarding Customer Information and Rescission of Year 2000 Standards for Safety and Soundness
Proper Disposal of Consumer Information Under the Fair and Accurate Credit Transactions Act of 2003
Standards for Safeguarding Customer Information

GLBA Information Security

Breach Notice - NCUA
Information Security and Breach Notice - FDIC
Information Security and Breach Notice - FRB
Information Security and Breach Notice - OCC
Information Security - CFTC
Information Security - FTC
Information Security - NCUA
Information Security - SEC

Government

Privacy Act of 1974

Health Information

Health Insurance Portability and Accountability Act of 1996 (HIPAA)
Pub. L. 104-191, 110 Stat. 1936 (1996)
Health Information Technology for Economic and Clinical Health Act (HITECH Act)
Pub. L. 111-5, 123 Stat. 115 (2009)
HIPAA Enforcement Rules
45 C.F.R. pt. 160, subpt. A – General Provisions
45 C.F.R. pt. 160, subpt. B – Preemption of State Law
45 C.F.R. pt. 160, subpt. C – Compliance and Investigations
45 C.F.R. pt. 160, subpt. D – Imposition of Civil Money Penalties
45 C.F.R. pt. 160, subpt. E – Procedures for Hearings
HIPAA Security, Breach Notification, and Privacy Rules
45 C.F.R. pt. 164, subpt. A – General Provisions
45 C.F.R. pt. 164, subpt. C – Security Standards
45 C.F.R. pt. 164, subpt. D – Breach Notification
45 C.F.R. pt. 164, subpt. E – Privacy
HIPAA Guidance
HHS-OCR Privacy Rule
HHS-OCR Security Rule
HHS-OCR Breach Notification Rule
HHS-OCR Guidance on HIPAA, COVID-19 Vaccination, and the Workplace
HHS-OCR Guidance of HIPAA & Cloud Computing
HHS-OCR Guidance on Risk Analysis Requirements under the HIPAA Security Rule
HHS-OCR HIPAA Cyber Security Guidance Materials
HHS-OCR Fact Sheet: Ransomware & HIPAA

Other

Americans with Disabilities Act of 1990 (revised in 2008)
Driver's Privacy Protection Act of 1994
Cable TV Privacy Act of 1984
Privacy Protection Act of 1980
Family Educational Rights and Privacy Act of 1974
Video Privacy Protection Act
Computer Fraud and Abuse Act (revised in 2001)

Executive Branch

Department of Commerce

The mission of the Commerce Department is to foster, promote, and develop the foreign and domestic commerce of the United States.

International Trade Administration (ITA)

ITA's mission is to strengthen the competitiveness of U.S. industry, promoting trade and investment, and ensuring fair trade and compliance with trade laws and agreements.

Privacy Shield Framework
Privacy of Health Information - HIPAA (Office of Civil Rights)
Website provides information on the following topics:
Consumer Information
General Background Information
HIPAA Regulations & Standards
Compliance & Enforcement
Educational Materials
Centers for Medicare and Medicaid Services - Ruels & Regulations
Website provides information on the following topics:
HIPAA Overview
HIPAA Educational Materials
Employer Identification Number
Enforcement
National Provider Identifier (NPI)
Security Standards
Transactions & Code Sets Standard
Frequently Asked Questions
Department of Homeland Security
Privacy Office
Data Privacy and Integrity Advisory Committee
Department of Justice
Office of Information Privacy
The Privacy and Civil Liberties Office
Department of the Treasury
Office of the Comptroller of the Currency

The Office of the Comptroller of the Currency (OCC) charters, regulates, and supervises all national banks. It also supervises the federal branches and agencies of foreign banks.

Federal Communications Commission
The FCC is an independent United States government agency, directly responsible to Congress. The FCC was established by the Communications Act of 1934 and is charged with regulating interstate and international communications by radio, television, wire, satellite and cable. The FCC's jurisdiction covers the 50 states, the District of Columbia, and U.S. possessions.
Federal Deposit Insurance Corporation
Regulation & Examinations
Consumer Protection
Federal Reserve Board
Identity Theft and Pretext Calling
Information Security
Cybersecurity Assessment Tool
Examination Guidance on Standards for Safeguarding Customer Information
Interagency Guidelines Establishing Standards For Safeguarding Customer Information
Federal Financial Institutions Examination Council
Customer Authentication and Internet Banking
Guidance on Authentication and Internet Banking
Frequently Asked Questions on FFIEC Guidance on Authentication in an Internet Baking Environment
Guide on Information Technology and Outsourcing Technology Services
FFIEC Management Booklet
Outsourcing Technology Services
Information Security Booklet
Frequently Asked Questions for Privacy Regulations
Departments
Division of Privacy and Identity Protection

The Division enforces Section 5 of the FTC Act, the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, and the Children’s Online Privacy Protection Act.  It also manages the Identity Theft Data Clearinghouse, which houses the federal government's centralized repository for consumer identity theft complaints.

Division of Marketing Practices

The Division issues, revises, and enforces Commission’s rules, including the Telemarketing Sales Rules and the CAN-SPAM Rules.

Division of Consumer Response & Operations

The division is responsible for various projects and functions, including the Consumer Response Center and Consumer Sentinel

Issues
Credit Reporting
Credit Reporting
Data Security
Protecting Personal Information: A Guide for Business
Privacy
Privacy and Identity
Children's Privacy
Financial Privacy
Identity Theft Information for Consumers
Telemarketing
Telemarketing
Complying with the Telemarketing Sales Rules
National Do Not Call Registry Website
SPAM
CAN-SPAM Act: A Compliance Guide for Business
SPAM
General Accountability Office
Identity Theft: Prevalence and Cost Appear to be Growing
Office of Management and Budget
Privacy Guidance and Reference Materials

Legislative Branch

House of Representatives
Senate

Judicial Branch

Supreme Court
U.S. Court of Appeals
U.S. Court of Appeals
Other U.S. Courts
U.S. District Courts
US District Courts